HIGHData Breach
Global

$10 million bounty offered for Chinese Hafnium hacker accused of Microsoft Exchange Server mega-attack

·Source: Graham Cluley

Updated:

Executive Summary

The US State Department is offering up to US $10 million for information about the whereabouts of Zhang Yu, a 44-year-old Chinese national who is accused of being a key figure in China's state-sponsored hacking group, Hafnium. Read more in my article on the Hot for Security blog.

Analysis

The US State Department is offering up to US $10 million for information about the whereabouts of Zhang Yu, a 44-year-old Chinese national who is accused of being a key figure in China's state-sponsored hacking group, Hafnium. Read more in my article on the Hot for Security blog.
Source Attribution

Originally published by Graham Cluley on Oct 9, 2026.

Related Threats

HIGHData BreachNEW

China-linked hackers used agentic AI in attack on 2,250 Microsoft 365 tenants

A China-state-aligned threat actor compromised a ConnectWise cloud backup application and used an open-source agentic AI framework to turn its stolen credentials against more than 2,250 Microsoft 365 tenants, Microsoft said. Microsoft Threat Intelligence attributed the activity to Storm-0940, which it said has used the ARTEX framework since as early as September 2026 to automate attacks on hundred

CSO Online
CRITICALData Breach

Two critical PHP flaws put the web on alert as emergency patches arrive

Organizations are scrambling to protect themselves following the disclosure of two critical vulnerabilities in commonly used code that powers much of the internet. The flaws discovered in the PHP scripting language could allow attackers to perform unauthenticated remote code execution (RCE). On Wednesday morning, the PHP Foundation released patches for affected versions, and said it is “imperative

CVE-2026-109618CVE-2026-109619
CSO Online
HIGHData Breach

Jefferson County Health Department Pays $2.25M to Settle Data Breach Lawsuit

Jefferson County Health Department, a public health agency for Jefferson County in Hillsboro, Missouri, has agreed to settle class action […] The post Jefferson County Health Department Pays $2.25M to Settle Data Breach Lawsuit appeared first on The HIPAA Journal .

HIPAA Journal